Privacy policy

Updated:

We build Durma on a simple idea: your data belongs to you. This policy explains what data the Durma apps (iPhone, Apple Watch, Android and Wear OS) and the durma.app website process, why, and what rights you have over it. Questions? Email support@durma.app.

The short version

  • No ads, no trackers. There are no ad networks, analytics SDKs or tracking scripts in the apps or on this site. We don’t sell your data.
  • No account required. If you don’t create an account, your data stays on your device and nothing is sent to us.
  • Health data is never used for advertising. Data from Apple Health and Health Connect is used only to provide the app’s features to you.
  • Leave any time. Export your data and delete your account from inside the app.

Data processed on your device

When you use Durma without an account, the following stays on your device only:

  • Walks: start and end time, duration, distance, pace, steps and cadence, walk type, interval programs, test results and, with your permission, heart rate.
  • Location and routes: only during a walk you start, for distance, pace and the map. Durma doesn’t track your location unless you have started a walk.
  • Profile and goals: birth year, sex, height, weight, resting heart rate, stride length, units, and your daily step and weekly brisk-minute goals. These are used to calculate intensity thresholds, test reference values and energy estimates, and all of them are optional.

Apple Health and Health Connect

With your permission, Durma:

  • writes your finished walks (workout, route and related measurements) to Apple Health or Health Connect,
  • reads your daily steps and heart rate from there.

You can revoke these permissions at any time in your phone’s settings. We never use data from Apple Health or Health Connect for advertising, marketing or data sales, and never share it with anyone for those purposes.

Motion and activity recognition

Durma reads your cadence from your device’s motion sensors while you walk. On Android, with your permission, it can notice that you have started walking and suggest recording a walk; that suggestion never starts location tracking on its own.

If you create an account

An account is needed for syncing between devices, the watch link and challenges. You can sign in with Apple, a passkey or your Google account. With an account, we store the following on our servers:

  • Account details: user ID, display name, the email address your sign-in provider shares (if any), and your sign-in method.
  • Profile and goals: the profile fields listed above, plus language, time zone and notification preferences.
  • Walks: walk summaries and routes, interval and test results.
  • Daily summaries: figures such as daily steps and brisk minutes; streaks, badges and challenge standings are calculated from them.
  • Programs, streaks, badges and challenges.
  • Device details: device platform and push token, so we can send you notifications.

We process this data only to provide the service: syncing, challenge standings, streaks and notifications. Our legal basis is the performance of our contract with you and, for health data, your explicit consent.

Challenges

When you join a challenge, the other members see your display name and your challenge number (for example, your steps). Your routes, location and other health data are never shared with challenge members. Challenges are private, invite-only groups of up to 20 people; there is no public leaderboard.

Service providers

We don’t sell your data or share it for advertising. To run the service we work with:

  • Cloudflare: network, security and content delivery for durma.app and our API.
  • Apple: Sign in with Apple and notifications to Apple devices (APNs).
  • Google: Sign in with Google and notifications to Android devices (Firebase Cloud Messaging).

These providers process data only to deliver their services to us. We don’t share your data with any other third party unless the law requires it.

This website

durma.app uses no cookies, no analytics and no tracking tools, and loads nothing from third parties. The site is served through Cloudflare, which briefly processes technical connection data such as IP addresses to keep the site secure and fast.

Retention and deletion

We keep your data for as long as you have an account. When you delete your account, all of your data on our servers is permanently deleted in one go, and if you used Sign in with Apple, the link with Apple is revoked. You choose whether to keep or delete the data on your device at that moment. Walks already saved to Apple Health or Health Connect stay there and are managed in those apps. See delete your account for details.

Your rights

Depending on where you live, including under the EU and UK GDPR and Turkey’s personal data protection law (KVKK), you have the right to access, correct, delete and port your data, to object to processing, and to withdraw consent. You can use most of these rights directly in the app:

  • Access and portability: export all your data as a JSON file from the Profile screen.
  • Correction: edit your profile in the app.
  • Deletion: delete your account from the Profile screen.
  • Withdrawing consent: turn off health, location and motion permissions in your device settings.

For anything else, email support@durma.app and we will respond within 30 days. You also have the right to complain to your data protection authority. We don’t sell or share personal information as those terms are used in US state privacy laws.

Children

Durma is not directed at children under 13, and we don’t knowingly collect data from children of that age.

Changes

When we update this policy, we change the date on this page. We will also announce significant changes in the app.